aipager

v0.4.5 suspicious
5.0
Medium Risk

Telegram remote-control daemon for Claude Code CLI sessions running in dtach

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits medium risk due to its high shell execution risk and moderate network interaction risk. While there is no evidence of obfuscation or credential theft, the maintainer's metadata suggests potential unreliability.

  • High shell execution risk
  • Moderate network interaction risk
  • Inexperienced maintainer
Per-check LLM notes
  • Network: Network calls may be legitimate if the package requires external API interactions, but should be thoroughly reviewed for destination and purpose.
  • Shell: Subprocess execution can indicate potential for arbitrary command execution, suggesting high risk unless clearly justified within the package's functionality.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The maintainer has a new or inactive account with limited package history and lacks a proper author name.

📦 Package Quality Overall: Medium (5.6/10)

✦ High Test Suite 9.0

Test suite present — 1 test file(s) found

  • Test runner config found: pyproject.toml
  • 1 test file(s) detected (e.g. test_wizard_team_setup.py)
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (7983 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 275 type-annotated function signatures detected in source
◈ Medium Multiple Contributors 5.0

Limited contributor diversity

  • 1 unique contributor(s) across 100 commits in dev-aly3n/aipager
  • Single author but highly active (100 commits)

🔬 Heuristic Checks

⚠ Outbound Network Calls score 3.0

Found 2 network call pattern(s)

  • pty.""" try: with urllib.request.urlopen(url, timeout=timeout) as r: return json.
  • try: with urllib.request.urlopen(url, timeout=15) as r: return json.l
✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 10.0

Found 6 shell execution pattern(s)

  • put).""" try: r = subprocess.run( [path, *args], capture_output=True,
  • if capture: r = subprocess.run(cmd, capture_output=True, text=True, check=check)
  • .stdout, r.stderr r = subprocess.run(cmd, check=check) return r.returncode, "", "" ex
  • rn False try: r = subprocess.run( ["uv", "tool", "list"], capture_out
  • rn False try: r = subprocess.run( ["pipx", "list", "--short"], captur
  • rn False try: r = subprocess.run( ["brew", "list", "aipager"], captur
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository dev-aly3n/aipager appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with aipager 
Create a mini-application named 'ClaudeTeleControl' that leverages the 'aipager' package to remotely control and manage Claude Code CLI sessions through Telegram. This application should allow users to start, stop, and interact with their dtach-managed Claude Code sessions via Telegram messages. Here’s a detailed breakdown of the steps and features you need to implement:

1. **Setup Telegram Bot**: First, create a Telegram bot using the official Telegram Bot API. Store your bot token securely.
2. **Install Required Packages**: Ensure you have installed the 'aipager', 'python-telegram-bot', and any other necessary packages.
3. **Integration with 'aipager'**: Utilize the 'aipager' package to handle the backend management of Claude Code CLI sessions. This includes starting, stopping, and controlling these sessions.
4. **Telegram Command Handling**: Implement command handlers in your bot to accept commands like '/start', '/stop', '/list_sessions', etc., to manage the sessions.
5. **Session Management**: Enable users to start new sessions, list all active sessions, and terminate specific sessions via Telegram.
6. **Interactive Session Control**: Allow users to send messages to their running Claude Code sessions through Telegram. These messages should be forwarded to the corresponding session in real-time.
7. **Logging and Notifications**: Integrate logging to track session activities and notify users via Telegram about session status changes.
8. **Security Measures**: Implement basic security measures such as user authentication before allowing them to control sessions.

Your goal is to create a seamless and efficient way for developers to manage their Claude Code CLI sessions remotely, enhancing productivity and flexibility.